🇺🇸
TPI-Abuse
2026-09-28 09:51:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 05:51:46.226018 2026] [security2:error] [pid 24845:tid 24845] [client 162.158.159.148:13112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thepartyblock.com"] [uri "/.htaccess"] [unique_id "aro4ssAFsXfGh9VfLlQ1NQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 11:57:45
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 07:57:38.818268 2026] [security2:error] [pid 7876:tid 7876] [client 162.158.159.148:13059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.glslightingandcontrols.com"] [uri "/wp-config.php"] [unique_id "arezMtnqm5Wf2IvtgGYYhgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-17 09:12:00
(1 week ago)
Web App Attack
2026-08-26 22:35:16
(1 month ago)
Fail2Ban apache-noscript
Bad Web Bot
2026-08-22 06:58:04
(1 month ago)
Fail2Ban apache-noscript
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-21 00:22:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:22:16.635785 2026] [security2:error] [pid 12394:tid 12394] [client 162.158.159.148:11485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aiamur.photo"] [uri "/.env.old"] [unique_id "ab3kuDFmUkIZLzkk5RUdOwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 07:15:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:15:15.101857 2026] [security2:error] [pid 9774:tid 9774] [client 162.158.159.148:11788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.peggyannjones.us"] [uri "/.env.dist"] [unique_id "abz0A6jC6YAaNcEA8fNsMgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 06:25:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:25:33.123391 2026] [security2:error] [pid 22612:tid 22634] [client 162.158.159.148:9826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ehealthpass.com"] [uri "/docker/.env"] [unique_id "abzoXTZivKdm29oaro_hfQAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 04:27:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:27:09.065789 2026] [security2:error] [pid 6578:tid 6578] [client 162.158.159.148:9478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.montebiancoltd.com"] [uri "/.env.production.bak"] [unique_id "abzMnWg743Di97vTXop7vAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2026-03-20 04:09:01
(6 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
lostswordfish.com
2026-03-19 18:28:06
(6 months ago)
Wordfence waf block on cyos
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:16:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:16:41.327899 2026] [security2:error] [pid 23678:tid 23678] [client 162.158.159.148:13148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thelundbergs.us"] [uri "/.env1"] [unique_id "abvbGShsD0uIZqHRK3w7jQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:57:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:56:55.923171 2026] [security2:error] [pid 7419:tid 7419] [client 162.158.159.148:12306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.sawted.com"] [uri "/root/.env"] [unique_id "abvWd_4QGltjVXaHFvRpJwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:16:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:16:36.451669 2026] [security2:error] [pid 30902:tid 30902] [client 162.158.159.148:13300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rayeliotschwartz.zenmonkeyproject.com"] [uri "/.env_config"] [unique_id "abvNBC8xRXmU7KzPknwDaAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 09:55:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.159.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 05:55:11.397752 2026] [security2:error] [pid 25314:tid 25314] [client 162.158.159.148:11014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campbellsclan.com"] [uri "/home/.env"] [unique_id "abvH_92H_chW6nXJxaRZOgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
